PlanBill

Privacy

Privacy Policy

How we collect and use your information, and the choices you have.

Last updated: October 9, 2026

1. Who we are

Ecle Coastal LLC d/b/a PlanBill ("we," "us," or "our") operates the PlanBill service at https://planbill.net. This policy explains what information we collect, how we use and share it, and the choices you have when using our website and services.

2. Information we collect

2.1 Information you provide

  • Account data: email address, password (hashed), legal name, preferred name, and profile details you set during signup or in settings.
  • Organization and business data: business name, display name, address, tax identifiers, and other details you enter for your organization.
  • Customer and contact data: names, addresses, email, phone, mobile numbers, and other details you add for your customers (e.g., for invoices and estimates). Mobile numbers may be used to deliver transactional text messages when a customer has opted in, your organization has access to SMS features, and outbound messaging is operational for your account—we do not send SMS marketing from PlanBill on your behalf.
  • Financial and transactional data: invoices, estimates, expenses, payments, and related records you create or upload. If you link a bank account (e.g., via Stripe Financial Connections), we also receive account type, the last four digits of the account, and with your consent transaction history (and optionally balances or account-holder details if you authorize those) to display bank activity and support expense tracking in the Service.
  • Documents and content: receipts, invoices, generated summaries, and other files you upload or export (including images and PDFs) for processing by our document and assistant features.
  • Communications: messages you send to us, such as support requests.
  • AI feature content: what you type or say to Hundo and Ask, voice clips you record in Voice Mode, text transcripts, and the answers, drafts, and scan results AI features produce for you.

2.2 Information we collect automatically

  • Usage data: how you use the Service (e.g., pages visited, features used, time spent).
  • Device and log data: IP address, browser type, operating system, and similar technical data.
  • Cookies and similar technologies: we use cookies and similar technologies as described in our Cookie Policy (e.g., for authentication and session management, and to remember your organization selection).

3. How we use your information

We use the information we collect to:

  • Provide and operate the Service, including invoicing, expense tracking, reports, bank-linked transaction visibility, and assistant features.
  • Authenticate you and manage your account and organizations.
  • Process documents you upload (e.g., receipt and invoice OCR and classification) using our assistant and related systems.
  • Process payments and manage subscriptions (including via third-party payment processors).
  • Send you service-related communications (e.g., account and security notices, product updates).
  • Deliver transactional SMS to your customers when they have opted in, your organization is on Pro with texting turned on, and outbound messaging is available. Texts are transactional only. No marketing. The customer must opt in. Paying an invoice does not require opting in. Reply STOP to opt out, HELP for help. Msg & data rates may apply. Message frequency varies.
  • Respond to your requests and provide support.
  • Provide AI features such as answering questions, drafting invoices and estimates, scanning receipts and documents, turning voice into text, and reading replies aloud.
  • Improve the Service, including by remembering how your business describes its services so future drafts can match your catalog.
  • Comply with legal obligations and protect our rights and the security of the Service.

5. Who we share information with

We may share your information with:

  • Service providers: vendors who help us operate the Service (e.g., hosting, authentication, payment processing, document processing, email, and SMS delivery through messaging partners and underlying carriers). They are contractually required to protect applicable data and use it only for the purposes we specify.
  • Payment processors: we use Stripe (or similar) for payments; their handling of payment data is governed by their privacy policy.
  • Third-party AI providers: When you use an AI feature, we send the information needed for that request to a third-party AI provider that runs that feature. This can include messages, voice clips, receipts, documents, and relevant business, customer, invoice, or expense details. Our Subprocessors page lists each provider and what it does. We ask for your permission before sending this data to an AI provider, and you can turn AI features on or off in Settings.
  • Bank and financial-connection providers: when you link a bank account (e.g., via Stripe Financial Connections), we work with the provider to retrieve only the data you authorize (such as transaction history). We use that data solely to provide the feature within our Service (e.g., expense tracking and financial visibility). We do not share this data with third parties for their own purposes. The provider's handling of your data is governed by their privacy policy.
  • Legal and safety: when required by law, or to protect our rights, your safety, or the safety of others.
  • Business transfers: in connection with a merger, sale, or other transfer of assets, subject to the same privacy commitments.

We do not sell your personal information or customer phone numbers.

6. Data retention

We keep your data while your account is active or as needed to provide the Service and carry out the purposes in this policy.

After your account closes, we may keep some data for legal, security, or legitimate business reasons, such as resolving disputes or enforcing our terms. This is typically up to 90 days for account data, and longer only if the law or an ongoing dispute requires it.

Generated summaries and packet exports follow the same retention rules as your other account documents unless a longer legal period applies. You can request deletion, subject to applicable law and these retention requirements.

AI features. Hundo and Ask conversations are deleted after 30 days without activity. PlanBill does not save Voice Mode recordings in account storage; a clip is sent for transcription and the text transcript is kept as part of the conversation. Drafts you save and scan results attached to a document follow the retention rules for those records. AI usage logs record the feature, model, and usage details, not the message or document content.

AI providers may handle or keep request information under their own terms and service configurations. Our Subprocessors page links to available provider information.

7. International transfers

Your data may be processed in countries other than your own. We take steps to ensure that such transfers are subject to appropriate safeguards (e.g., standard contractual clauses or adequacy decisions) as required by applicable law. Data obtained through bank account linking is stored in the United States. If you use an AI feature with that data, the AI provider may process it in other countries to answer your request.

8. Security

We implement technical and organizational measures to protect your data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to:

  • Access and receive a copy of your personal data.
  • Correct or update inaccurate data.
  • Request deletion of your data.
  • Restrict or object to certain processing.
  • Data portability (where applicable).
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with a supervisory authority.

To use these rights, email privacy@planbill.net or your designated contact. We will respond within the time required by applicable law.

10. Children

The Service is not intended for users under 18. We do not knowingly collect personal data from children; if we learn we have done so, we will delete it promptly.

11. Customer text messages

Customer texting is available on Pro when the business enables it and the customer opts in. We use the mobile number solely for transactional messages: invoices, estimates, payment links, confirmations, and reminders. We do not use it for marketing or promotional texts.

Messaging partners and carriers deliver these texts. Reply STOP to opt out or HELP for help. Our Text messaging policy and Terms of Service explain consent and recipient choices.

12. California and other U.S. state privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, use, and disclose; to request a copy or deletion; to correct inaccurate information; to opt out of sale or sharing where it applies; and not to be treated differently for using these rights.

In the past 12 months we collected these categories: identifiers, such as name, email, and IP address; customer records, such as business details, addresses, and tax IDs; commercial information, such as invoices, estimates, payments, and expenses; financial information from linked bank accounts; internet activity about how you use the Service; audio information from Voice Mode clips processed for transcription; and account login details. We get this information from you, your use of the Service, and providers you connect, such as your bank through Stripe. We use it for the purposes in section 3 and disclose it for business purposes to the service providers in section 5 and on our Subprocessors page, including our AI providers. We keep each category for the periods in section 6.

We do not sell or share personal information, as those terms are defined in the CCPA, and we have not done so in the past 12 months. We use sensitive personal information, such as account login details and any Social Security number you enter as a tax ID, to provide the Service and for other purposes the CCPA allows, so we do not offer a separate right to limit. Our AI features do not make decisions about consumers that have legal or similarly significant effects. To use your rights, email privacy@planbill.net. We will verify your request using information tied to your account. You may use an authorized agent with your signed permission. If you are a customer of a business that uses PlanBill, contact that business first; we process your information on its behalf.

Other U.S. states, including Virginia, Colorado, Connecticut, and Texas, provide similar rights where their laws apply. Florida's Digital Bill of Rights applies only to much larger companies, but Florida residents can contact us with privacy requests.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we may provide additional notice (e.g., email or in-app). Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact

Ecle Coastal LLC d/b/a PlanBill, 7901 4th St, N Ste 300, St. Petersburg, FL 33702. For privacy-related questions or to exercise your rights, contact us at: privacy@planbill.net. For data protection matters in the EEA/UK, you may also contact our representative or supervisory authority as required by law.